Script `dns-update`

Script types: portrule
Categories: vuln, intrusive
Download: https://svn.nmap.org/nmap/scripts/dns-update.nse

Script Summary

Attempts to perform a dynamic DNS update without authentication.

Either the test or both the hostname and ip script arguments are required. Note that the test function will probably fail due to using a static zone name that is not the zone configured on your target.

Script Arguments

dns-update.test: Add and remove 4 records to determine if the target is vulnerable.
dns-update.ip: The ip address of the host to add to the zone
dns-update.hostname: The name of the host to add to the zone

Example Usage

nmap -sU -p 53 --script=dns-update --script-args=dns-update.hostname=foo.example.com,dns-update.ip=192.0.2.1 <target>

Script Output

PORT   STATE SERVICE
53/udp open  domain
| dns-update:
|   Successfully added the record "nmap-test.cqure.net"
|_  Successfully deleted the record "nmap-test.cqure.net"

Requires

Author:

Patrik Karlsson